78071 matches found
CVE-2019-25506
FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. Attackers can exploit the vulnerable password parameter in requests to...
CVE-2019-25501
Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the appid parameter. Attackers can send POST requests to deleteapplicationajax.php with crafted payloads to extract sensitive data, bypass...
CVE-2019-25434
creationtimestamp| type| source ---|---|--- 2026-03-05 02:00:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgbpa5euxi2h...
CVE-2019-25498
creationtimestamp| type| source ---|---|--- 2026-03-04 18:23:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgavoodeqc2d 2026-03-06 22:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggduevsn72w...
CVE-2019-25503
PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...
CVE-2019-25502
Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the jobtypevalue parameter in the jobs endpoint. Attackers can craft requests with SVG payload injection to execute arbitrary JavaScript in victim...
CVE-2019-25500
Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid parameter. Attackers can send POST requests to the register-recruiters endpoint with time-based SQL injection payloads to...
CVE-2019-25500
creationtimestamp| type| source ---|---|--- 2026-03-04 18:01:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgauid3xpx2e 2026-03-06 23:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggg42r6rw2e...
CVE-2019-25501
creationtimestamp| type| source ---|---|--- 2026-03-04 17:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgaucwyvbu2n 2026-03-06 05:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgelybklex2w...
CVE-2019-25506
creationtimestamp| type| source ---|---|--- 2026-03-04 17:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgau62na2x24 2026-03-30 13:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mibprbwrcm2d...
CVE-2019-25499
creationtimestamp| type| source ---|---|--- 2026-03-04 17:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgatzlbp7o2v 2026-03-06 22:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggey4uwcw2e...
CVE-2019-25504
creationtimestamp| type| source ---|---|--- 2026-03-04 17:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgatvdjz5h2e...
CVE-2019-25507
creationtimestamp| type| source ---|---|--- 2026-03-04 17:48:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgatrgjdsg2u...
CVE-2019-25506 FreeSMS 2.1.2 Authentication Bypass via SQL Injection
FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. Attackers can exploit the vulnerable password parameter in requests to...
CVE-2019-25505 Tradebox 5.4 SQL Injection via symbol Parameter
Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthlydeposit endpoint with malicious symbol values using boolean-based blind,...
CVE-2019-25505 Tradebox 5.4 SQL Injection via symbol Parameter
Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthlydeposit endpoint with malicious symbol values using boolean-based blind,...
CVE-2019-25503 PHPads 2.0 SQL Injection via click.php3 bannerID
PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...
CVE-2019-25499 Simple Job Script SQL Injection via get_job_applications_ajax.php
Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jobid parameter. Attackers can send POST requests to getjobapplicationsajax.php with malicious jobid values to bypass authentication,...
runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process...